Samba / Rsync
41 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-70455 | rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion | HIGH | 8.7 | Aug 13, 2026 |
| CVE-2026-70457 | rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() | HIGH | 8.3 | Aug 13, 2026 |
| CVE-2026-70459 | rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry | MEDIUM | 6.9 | Aug 13, 2026 |
| CVE-2026-70461 | rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry | HIGH | 8.8 | Aug 13, 2026 |
| CVE-2026-70463 | rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing | HIGH | 8.6 | Aug 13, 2026 |
| CVE-2026-53801 | rsync < 3.5.0 Symlink Race Condition Directory Traversal | HIGH | 8.2 | Aug 13, 2026 |
| CVE-2026-53800 | rsync < 3.5.0 Symlink Race Condition via --remove-source-files | MEDIUM | 5.7 | Aug 13, 2026 |
| CVE-2026-53799 | rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application | HIGH | 7.2 | Aug 13, 2026 |
| CVE-2026-53797 | rsync < 3.5.0 Symlink Race Condition Information Disclosure | MEDIUM | 5.7 | Aug 13, 2026 |
| CVE-2026-53795 | rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest | HIGH | 7.2 | Aug 13, 2026 |
| CVE-2026-53791 | rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header | CRITICAL | 9.1 | Aug 13, 2026 |
| CVE-2026-53789 | rsync < 3.5.0 Arbitrary File Deletion via Malicious File List | HIGH | 7.1 | Aug 13, 2026 |
| CVE-2026-53798 | rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping | MEDIUM | 6.9 | Aug 13, 2026 |
| CVE-2026-53786 | rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive | MEDIUM | 6.9 | Aug 13, 2026 |
| CVE-2026-53784 | rsync < 3.5.0 Path Traversal via Symlink Module Root | HIGH | 8.4 | Aug 13, 2026 |
| CVE-2026-53803 | rsync < 3.5.0 Symlink Following Arbitrary File Overwrite | HIGH | 8.5 | Aug 13, 2026 |
| CVE-2026-53802 | rsync < 3.5.0 Arbitrary File Read via Symlink Following | HIGH | 8.4 | Aug 13, 2026 |
| CVE-2026-29518 | Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write | HIGH | 7.3 | May 20, 2026 |
| CVE-2026-43617 | Rsync < 3.4.3 Authorization Bypass via Hostname Resolution | MEDIUM | 6.3 | May 20, 2026 |
| CVE-2026-43618 | Rsync < 3.4.3 Integer Overflow Information Disclosure | MEDIUM | 6.1 | May 20, 2026 |
| CVE-2026-43619 | Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls | HIGH | 7.2 | May 20, 2026 |
| CVE-2026-43620 | Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() | MEDIUM | 6.9 | May 20, 2026 |
| CVE-2026-45232 | Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy | LOW | 2.1 | May 20, 2026 |
| CVE-2026-41035 | rsync: Rsync: Use-after-free vulnerability in extended attribute handling | HIGH | 7.8 | Apr 16, 2026 |
| CVE-2024-12084 | Rsync: heap buffer overflow in rsync due to improper checksum length handling | CRITICAL | 9.8 | Jan 15, 2025 |
Showing 1 to 25 of 41 CVEs